Sr Mgr, IT Audit

Entergy•New Orleans, LA

8d•Hybrid

About The Position

The IT Audit Senior Manager establishes strategic relationships with leaders throughout the company to proactively manage risk, improve internal controls, and drive outcomes aligned with Entergy’s vision and mission. The role co-leads the risk assessment process and audit plan, and ensures audit teams use approved practices, tools, and technology to evaluate the adequacy, effectiveness, and completeness of internal controls. The position directly manages audit professionals, oversees the quality and timely execution of audit projects, and manages a co-sourced audit partner for highly technical IT projects. It also leads development and execution of the Internal Audit Strategic Plan, provides assurance regarding IT and cybersecurity controls, and continuously improves audit processes, people, tools, automation, and data analytics. The role works with senior management, process owners, external auditors, internal compliance groups, and governance committees. The position is based in New Orleans, Louisiana, with hybrid workplace flexibility and travel of up to 25%.

Requirements

Bachelor’s degree in Accounting, Business, Computer Science, or a related field.
At least 10 years of audit experience.
Required designation as CIA, CISA, CISSP, CPA, or CFE.
Experience with IIA Audit Standards and best practices; Sarbanes-Oxley 404 control program implementation and support; IT general controls; COSO; Service Organization Control reports; ISACA practices for information systems; NIST and other cyber risk frameworks; and COBIT or other leading control frameworks.
Experience using data analytics tools to query data and support audits.
Detailed understanding of technology tools and related controls, including Data Loss Prevention, Threat and Vulnerability Management, Cloud Risk and Controls using CASB, RPA bots, Identity Management, application vulnerability scanners, separation of duties for IT functions, Change Management, PII data, audit trails and trending, and vendor SLA management.
In-depth understanding of audit principles, practices, concepts, and theories for financial, IT, and operational processes, as well as utility industry risks.
Ability to identify risks and opportunities to improve internal controls, business processes, and information systems, and use root cause analysis to recommend improvements.
Ability to influence and persuade internal and external stakeholders, including business leaders, external auditors, and co-sourced auditors.
Authorization to work in the United States; the employer will not sponsor work visas for this position.

Nice To Haves

An advanced degree.
IT audit or IT security experience.
Five or more years of managerial experience.
Multiple professional designations from CIA, CISA, CISSP, CPA, or CFE.

Responsibilities

Continuously assess risks and trends that could affect company strategic and business objectives.
Meet with executive and senior leaders to understand business objectives and risk concerns.
Help develop and implement a dynamic audit plan that reduces company risk and supports management’s objectives.
Guide stakeholders in mitigating IT and cybersecurity risks and enhancing related internal controls.
Set policy objectives for new technologies, including AI, robotic process automation, and cloud hosting.
Recommend better practices and influence process owners to improve controls, results, and business value.
Co-lead development and execution of the Internal Audit Strategic Plan.
Directly manage audit professionals and ensure projects are completed to high-quality standards, on time, and in accordance with IIA and other applicable professional standards.
Manage the co-sourced contract and audit partner for highly technical IT projects.
Review and approve audit reports for accuracy, clarity, concision, and relevance.
Develop and deliver persuasive presentations on complex topics to senior management.
Manage and continuously improve audit processes, people, and tools to meet IIA and other compliance standards while providing value, efficiency, and flexibility.
Develop, coach, and mentor audit team members.
Use department resources effectively and efficiently, and establish measures to monitor audit team performance.
Assess IT General Controls, security controls, and the effectiveness of the SOX 404 control program.
Provide management assurance regarding the effectiveness of the IT and cybersecurity control environment.
Manage and evolve the automation and data analytics program.
Coordinate with external auditors, internal compliance groups, and governance committees.
Be available for additional hours, alternate work locations, or additional duties during storms, outages, emergencies, or other company-deemed situations.